Legal
Privacy Policy
Last updated: 1 September 2026
This Privacy Policy explains what information Forypay (“we”, “us”) collects through the Forypay website and API, why we collect it, how we use and share it, and the choices you have. It applies to the site, the developer console, the API and the webhooks we deliver.
What this policy covers
It does not cover the data you send to the blockchains. Smart-contract transactions, addresses and amounts are public by design and are not “personal” in our hands.
1.Information we collect
Account information: your name, work email address and password (stored as a salted, hashed digest). Billing information: the payment-card and invoice details processed by our payment provider; we never store full card numbers. API usage: the requests you make with your API key, including the networks, tokens, amounts and addresses you send to the create, verify and webhook endpoints. Technical data: IP address, browser and device data, and cookies used to keep you signed in.
2.How we use your information
To create and maintain your account and projects; to process payments and issue invoices; to operate, secure and improve the API, including verifying payments and delivering webhooks; to send service, security and billing notices; and to enforce our Terms of Service.
3.What we do not do
We do not sell your personal information. We do not share it with advertisers. We do not read private keys, and we never have custody of the funds held in the addresses you configure — the blockchain protocol settles those.
4.How we share information
We share data only with the service providers we need to run the product (hosting, payment processing, email delivery, analytics) and only to the extent they need it, under contracts that require them to protect it. We may disclose information where required by law, or to protect the rights, safety or property of Forypay, our users or the public.
5.Data retention
We keep your account and project data for as long as your account is active, and payment/webhook history for as long as your business needs it or the law requires. When you delete a project or ask us to delete your account, we remove or anonymise the relevant data within a reasonable period, subject to legal and audit obligations.
6.Security
We use encryption in transit (TLS), encrypt passwords and webhook secrets at rest, scope API keys to a single project, and keep a full audit log of sensitive actions. No system is perfectly secure, and you share responsibility by keeping your keys and passwords private and setting inbound webhook endpoints to verify our signatures.
7.Your rights
Depending on your jurisdiction you may have the right to access, correct, export, restrict or delete your personal information, and to object to certain processing. Contact us and we will respond as applicable law requires.
8.Cookies
We use strictly necessary cookies (and a session) to keep you signed in to the console. We do not use third-party advertising cookies.
9.Changes to this policy
We may update this policy from time to time. Material changes will be announced on the site and, where required, by email. The “Last updated” date above reflects the current version.
10.Contact
For privacy questions or requests, email [email protected]. We aim to reply within a few business days.